Phishing

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which describes phishing?

A Flooding a web server with traffic until it stops working

B Sending many fake emails that look genuine to trick users into giving personal details

2. An email says it is from your bank and asks you to click a link to 'verify your account'. What is it most likely to be?

A A phishing email

B A genuine security update

3. What is the main aim of a phishing attack?

A To steal passwords and bank details

B To speed up the victim's computer

4. Where does the link in a phishing email usually take you?

A The real website, with extra security added

B A fake website that looks like the real one

5. How are phishing emails usually sent?

A To a large number of people at once

B To one carefully chosen person only

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1From: security@bank-verify.com		AThe first step is the criminal sending fake emails that look genuine. The user types their details into a fake website, not the real one.
2Click here to confirm your password		Bsend_email(fake_message, all_users)
3Phishing sends a large number of fake emails to many users, hoping some will respond		CA phishing message that persuades the user to follow a link to a fake website and enter personal details
4The aim of phishing is to steal passwords and bank details from the victim		DThis describes a worm or virus, not phishing. Phishing is fake emails or messages that trick people into giving away personal details.
5Phishing = a virus that copies itself between computers		Estolen_data = password + bank_details
6Phishing step 1: the user types their password into the real bank website		FA fake sender address pretending to be a trusted company, a typical sign of a phishing email

Definitions

phishing

Fill in the Blanks

Complete each line of code by filling in the missing parts.

Phishing sends fake ______ that look genuine

Fake email looks _______

User clicks a ____ to a fake website

1. Fake email from a trusted company 2. User clicks link to fake website 3. User types ________ into fake page

Aim: steal passwords and ____ details

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A sender ← "fake bank"

B SEND email TO many_users

C OUTPUT "Click to verify"

D IF user IGNORES link THEN

E SHOW fake_website

Question 2

A aim ← "steal passwords"

B sender ← "unknown stranger"

C SEND email TO many_users

Question 3

A email ← "From: Your Bank"

B link ← "real-bank.com"

C SEND email WITH link

Question 4

A user ← CLICK link

B INPUT password, card_number

C SEND details TO bank

D criminal ← "steals money"

Question 5

A aim ← "speed up computer"

B email ← "Urgent: confirm login"

C SEND email TO many_users

Answer Key

Phishing

Section A: Quick Questions

B — Sending many fake emails that look genuine to trick users into giving personal details

A — A phishing email

A — To steal passwords and bank details

B — A fake website that looks like the real one

A — To a large number of people at once

Section B: Match the Pairs

From: security@bank-verify.com → A fake sender address pretending to be a trusted company, a typical sign of a phishing email

Click here to confirm your password → A phishing message that persuades the user to follow a link to a fake website and enter personal details

Phishing sends a large number of fake emails to many users, hoping some will respond → send_email(fake_message, all_users)

The aim of phishing is to steal passwords and bank details from the victim → stolen_data = password + bank_details

Phishing = a virus that copies itself between computers → This describes a worm or virus, not phishing. Phishing is fake emails or messages that trick people into giving away personal details.

Phishing step 1: the user types their password into the real bank website → The first step is the criminal sending fake emails that look genuine. The user types their details into a fake website, not the real one.

Section C: Definitions

phishing — Sending many fake emails that look genuine to trick users into clicking a link or replying with personal details, so criminals can steal passwords and bank details.

Section D: Fill in the Blanks

Phishing sends fake emails that look genuine

Fake email looks genuine

User clicks a link to a fake website

1. Fake email from a trusted company
2. User clicks link to fake website
3. User types password into fake page

Aim: steal passwords and bank details

Section E: Spot the Error

D — The fake website is only shown when the user CLICKS the link. If they ignore it, the phishing attack fails. It should be IF user CLICKS link THEN.

B — Phishing emails pretend to come from a trusted company so that they look genuine. An unknown stranger would not be believed. It should be sender ← "trusted company".

B — The link in a phishing email leads to a fake website that copies the real one. A link to the real bank would not steal anything. It should be link ← "fake-bank-login.com".

C — On the fake website, the details the user types are sent to the criminal, not to the real bank. It should be SEND details TO criminal.

A — The aim of phishing is to steal personal data such as passwords and bank details, not to speed up a computer. It should be aim ← "steal bank details".